CVE-2026-71513High· 8.8▾ TwilightNLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 23.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
1.1%
Last analysed / modified upstream
NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft untrusted transition-parser models that execute arbitrary commands when TransitionParser.parse loads the model through allowlisted_pickle_load.
nltk < 3.10.3Upgrade past the affected range:
nltk 3.10.3Affected packages:
nltk >= 3.10.0, < 3.10.3Patched in:
nltk 3.10.3Connected by shared product, vendor, weakness, or advisory.
CVE-2026-79657CriticalNLTK: Allowlisted pickle loaders still permit code execution in current source
CVE-2026-78683CriticalNLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution
CVE-2026-72818High· 7.5NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking
CVE-2026-12876MediumNLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars
CVE-2026-81723Low· 3.7NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`
CVE-2026-78680High· 7.8NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary